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Amendments to the Claims 
This listing of claims will replace all prior versions of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A system that facilitates access to a plurality of shared software 
objects by disparate entities, comprising: 

a platform component that receives a request to access an object by a[[n]] first entity, 
wherein the first entity is attempting to convert a subscription from a second type of a second 
entity to a type of the first entit y wherein the entity requests access to an object on behalf of 
another entity, the entity and the another entity are each an individual human or a business ; 

a data store that stores security information on classes of the objects , wherein the security 
information includes a security parameter that indicates allow ability of the first entity to convert 
the subscription from the second type to the first type ; and 

a verification component that employs the security information to verify that the first 
entity has permission to call an Application Programming Interface (API) for the object or 
operate on the object to convert the subscription from the second type to the first type ^-the 
verification component permits the another entity to call or operate on the object upon 
verification that the entity has the permission . 

2. (Previously Presented) The system of claim 1, the verification component exposes the 
object to the entity if permission exists. 

3. (Previously Presented) The system of claim 1, the verification component masks the 
object from the entity if permission does not exist. 

4. (Original) The system of claim 1, the platform further comprising a Subscription 
Platform Service to facilitate automated billing and provisioning of accounts. 
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5. (Previously Presented) The system of claim 1, the verification component facilitates that 
the entity receive full access to Application Programming Interfaces (API's) and/or objects for 
which there is a business need and partial or limited access to other API's or business objects. 

6. (Original) The system of claim 1 , the data store provides default or determined security 
information related to a class. 

7. (Original) The system of claim 6, further comprising a component to override the default 
security information with higher or different security options. 

8. (Previously Presented) The system of claim 1 , further comprising a proxy tenant 
component wherein an intermediate entity places calls into a subscription platform service on 
behalf of another entity and achieves access to selected objects in order for the another entity to 
complete a subscription purchase. 

9. (Original) The system of claim 1 , further comprising a management portal to facilitate 
authorization of information. 

10. (Original) The system of claim 1, further comprising a component to provide an explicit 
security mapping for an object. 

1 1 . (Original) The system of claim 1 , further comprising a component to enable an implicit 
security mapping from an explicitly mapped object or to derive an implied security permission 
by utilizing related objects. 

12. (Original) The system of claim 1, the verification component employs operating system 
identities to facilitate security authorization procedures. 

13. (Original) The system of claim 1, further comprising at least one of a sign-up API caller, 
an account management API caller, and a customer care API caller. 
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14. (Original) The system of claim 13, further comprising at least one API related to at least 
one of a sign-up API group, an account management API group, a customer care API group, and 
an object designer API group. 

15. (Original) The system of claim 1, further comprising authorization logic that determines 
whether an API can access an object via an access rights set. 

16. (Original) The system of claim 1, further comprising at least one of a restricted audience 
offer, a conversion component, and a payment instrument component. 

17. (Cancelled). 

18. (Previously Presented) A method to facilitate security for subscription objects, 
comprising: 

storing one or more security options in a database, the security options related to an 
automated billing and provisioning system, wherein the security options include at least 
conversion of a subscription from a first type associated with a first tenant to a second type 
associated with a second tenant, wherein the security option indicates allow ability of the second 
tenant to convert the subscription type from the first type to the second type; 

assigning the security options to a class; and 

inheriting the security options by object members of the class. 

19. (Original) The method of claim 18, further comprising at least one of explicitly and 
implicitly assigning the security options to the object members of the class. 

20. (Original) The method of claim 18, further comprising accessing the database via an 
application programming interface (API). 

21 . (Original) The method of claim 20, further comprising automatically authorizing the API. 
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22. (Original) The method of claim 21, further comprising returning an error code if an 
authorization procedure fails. 

23. (Original) The method of claim 21, further comprising analyzing a simple object access 
protocol request. 

24. (Original) The method of claim 2 1 , further comprising analyzing one or more security 
credentials. 

25. (Original) The method of claim 24, further comprising employing a cache to process the 
credentials. 

26. (Original) The method of claim 18, the automated billing and provisioning system 
further comprising a Subscription Platform Service. 

27. (Original) The method of claim 18, the security options are associated with default 
security parameters. 

28. (Original) The method of claim 1 8, further comprising overriding the default security 
parameters with other security options. 

29. (Original) The method of claim 18, further comprising employing an intermediate proxy 
that places calls into a subscription platform service on behalf of another tenant. 

30. (Currently Amended) A system embodied on a computer readable storage medium to 
facilitate business object security, comprising: 

means for authenticating at least one a first entity attempting access to an online billing 
and service, wherein the at least one first entity is attempting to convert a subscription from a 
second type of a second entity to a type of the first entity access on behalf of another entity, the 
entity and the another entity are each an individual human or a business ; 
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means for authorizing the first entity to convert the subscription from a second type of a 
second entity to a type of the first entity upon verifying at least one security parameter, wherein 
the at least one security parameter includes a security parameter indicates allow ability of the 
first entity to convert the subscription from the second type to the first type, at least one entity 
and authorizing the another entity upon authorization of the at least one entity; and 

means for associating a security parameter with at least one business object from a 

globalized region of a database. 

3 1 . (Currently Amended) A data packet stored on a computer readable storage medium that 
when transmitted facilitates communications between at least two components of an subscription 
platform service, comprising: 

an Application Programming Interface packet to identify a first partner; 
a security credential packet to facilitate authorization of the first partner; and 
a security parameter packet inherited by a business object to facilitate access to a 
subscription platform database, wherein the security parameter packet includes at least a security 
parameter for conversion of a subscription of a subscriber from a second first type associated 
with a second another partner to a first second type associated with the first partner, wherein the 
security parameter indicates allow ability of the first second partner to convert the subscription 
type from the second first type to the second first type. 

32. (Currently Amended) A computer readable storage medium having a data structure stored 
thereon, the data structure comprising: 

at least one security field indicating global security parameters in a subscription platform 
database, wherein the global security parameters include at least a security parameter for 
conversion of a subscription of a subscriber from a first type associated with a first tenant to a 
second type associated with a second tenant, wherein the security parameter for conversion 
indicates allow ability of the second tenant to convert the subscription type from the first type to 
the second type; 

at least one object field associated with an account in the database; and 
at least one class field to associate the security field and the object field. 
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